Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.mft
File: oNrnZ4o5aWnmNAydy2XN6eMpVUo.mft (raw, json)
Hash identifier: 2IYRna9eKJh3YHc0tJ6gwvj1Ly6AgwvaRiZlJjcSfBY=
Subject key identifier: 6D:AB:9E:8E:10:2F:F7:61:EE:09:70:88:78:07:48:CE:50:7C:42:7E
Authority key identifier: A0:DA:E7:67:8A:39:69:69:E6:34:0C:9D:CB:65:CD:E9:E3:29:55:4A
Certificate issuer: /CN=a0dae7678a396969e6340c9dcb65cde9e329554a
Certificate serial: 019A13F2862D63D4FBA55CA1D543FABDE3CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oNrnZ4o5aWnmNAydy2XN6eMpVUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.mft
Manifest number: 0DFD
Signing time: Fri 24 Oct 2025 02:00:52 +0000
Manifest this update: Fri 24 Oct 2025 02:00:52 +0000
Manifest next update: Sat 25 Oct 2025 02:00:52 +0000
Files and hashes: 1: ILIvvSN7jhBNrgAFepnE5fxAfIc.roa (hash: qrswcvi6gW3Bxpx7V6TKM6+tVg0zuZnKPktwjp/YCHs=)
2: S4AYf34wbJr686FuAfXvLLFVW90.roa (hash: QoZkIggV0Rak9NY5B7MD5kJpzqBlOZcHQ7nSTP7ujCU=)
3: jzKy-bNbEooaDReNok2j2yv-pdI.roa (hash: GUiFogVUQmG0/pMsKlem+Qrlz+e50kXxDrB2fF+wH/s=)
4: oNrnZ4o5aWnmNAydy2XN6eMpVUo.crl (hash: l0c4UO7MCjpUhjsVoem6JrtBPP2sYnCzak0RLVrlJLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/oNrnZ4o5aWnmNAydy2XN6eMpVUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Oct 2025 02:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:13:f2:86:2d:63:d4:fb:a5:5c:a1:d5:43:fa:bd:e3:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0dae7678a396969e6340c9dcb65cde9e329554a
Validity
Not Before: Oct 24 02:00:52 2025 GMT
Not After : Oct 25 02:00:52 2025 GMT
Subject: CN=6dab9e8e102ff761ee097088780748ce507c427e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:da:ba:26:3e:a2:69:1a:3d:b2:3f:3e:b8:18:
29:ae:c1:b2:55:37:59:89:ae:1f:5a:b7:8c:1f:67:
42:ef:ef:9e:12:7b:16:a1:7b:c8:08:82:b9:f7:63:
67:76:ce:a5:32:e6:07:c0:1e:46:71:9b:f5:16:f1:
9f:7d:aa:3e:58:78:95:87:3a:8f:4d:90:12:3b:6f:
a1:b4:2d:8c:af:71:6e:c0:9e:72:1e:24:51:7a:51:
11:64:3e:5b:5d:48:24:7d:0a:2d:f8:03:76:44:ea:
93:12:0f:68:d1:f1:b5:73:ae:0b:51:c5:59:e0:0f:
2c:38:24:f5:30:89:52:90:42:90:79:a3:4e:33:7d:
d8:b4:87:60:d7:ba:cb:ac:47:4b:bb:0a:45:2e:a5:
53:3d:0f:5d:72:22:72:97:5d:38:d8:99:e9:4b:3f:
51:1c:f4:dc:e0:40:73:c6:f5:b7:9d:e9:7a:eb:6b:
77:55:ff:7e:c0:e9:0b:87:d5:3b:33:9a:73:1f:d1:
c8:25:2d:3e:5d:92:0a:54:f1:42:22:4b:c1:27:72:
73:3a:87:fd:46:a1:c4:12:1b:50:02:b3:3d:53:ad:
ff:81:ad:96:5c:5a:3d:97:f6:6c:8a:eb:79:d0:9b:
68:9d:e5:85:c6:d3:33:87:96:c5:66:d1:3b:ac:f2:
61:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:AB:9E:8E:10:2F:F7:61:EE:09:70:88:78:07:48:CE:50:7C:42:7E
X509v3 Authority Key Identifier:
keyid:A0:DA:E7:67:8A:39:69:69:E6:34:0C:9D:CB:65:CD:E9:E3:29:55:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oNrnZ4o5aWnmNAydy2XN6eMpVUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:5c:6f:d2:b1:bb:32:70:98:7f:fd:07:06:58:5b:5e:59:f0:
29:1c:4a:4a:85:0a:ce:91:1b:76:33:cc:a1:5c:29:f7:a0:a6:
e5:80:57:c2:e0:81:b9:fc:82:ac:11:fa:52:44:b6:ef:29:42:
19:b5:80:f1:9e:80:56:71:5b:ad:2e:af:48:d3:16:44:75:61:
05:da:d2:21:af:58:97:6d:f4:5d:a2:de:bb:0e:4f:5d:8d:29:
58:7d:d9:e9:b7:44:e7:2d:4d:5a:b9:1e:36:57:ce:8d:d2:99:
3d:6a:0f:c1:ea:b2:93:07:31:57:66:d1:f8:f2:46:f0:35:22:
9f:18:5f:9e:1b:25:1c:74:24:53:89:09:99:4f:53:10:25:5d:
35:6e:48:5a:ea:10:96:d6:40:7c:c4:78:b4:87:ab:70:08:05:
86:16:4c:0f:9a:8e:31:fa:74:85:fe:08:35:15:6b:84:fa:fc:
4b:bf:91:61:97:6d:98:fe:26:72:72:05:af:af:55:4b:8d:ca:
a9:fe:f6:94:d4:45:48:bd:e9:25:77:e0:55:81:d6:1b:bc:3f:
45:cb:cc:8b:df:61:4b:e4:45:4b:5f:aa:bf:79:f5:78:85:ad:
f5:06:e2:dd:43:f0:5c:d3:aa:d7:55:88:f6:56:17:6d:f1:28:
d0:ac:2d:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 11:43:09 2025 by rpki-client